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President  and  Members: 


The  Office  of  the  Controller  (Controller)  presents  its  report  on  the  investigation  of  an 
allegation  that  the  Department  of  Building  Inspection  (department)  of  the  City  and  County 
of  San  Francisco  (City)  improperly  prepaid  a city  vendor,  Government  Computer  Sales, 
Inc.  (GCSI),  for  incomplete  work. 

Our  investigation  substantiated  the  allegation.  We  found  that  the  manager  of  the 
department’s  Management  Information  Services  Division  (MIS)  improperly  approved 
payment  to  GCSI  for  work  that  it  and  its  subcontractors  had  not  yet  performed.  The 
department  issued  three  purchase  orders  to  GCSI  to  conduct  work  on  three  technology 
projects  that  involved  the  enhancement  of  computer  applications.  Although  GCSI’s 
subcontractors  had  completed  as  little  as  35  percent  of  the  work  on  one  of  these  projects, 
the  MIS  manager  approved  paying  GCSI  the  entire  amounts  of  the  purchase  orders. 

The  three  technology  projects  were  key  to  implementing  a number  of  efficiency 
recommendations  from  the  Controller’s  2001  performance  audit  of  the  department.  The 
projects  were  begun  in  late  2000  or  early  2001.  The  department  paid  the  prime  contractor, 
GCSI,  for  work  that  had  not  been  done.  GCSI  then  became  bankrupt  without  paying  its 
subcontractors.  Since  the  subcontractors  have  not  been  paid,  they  have  still  not  completed 
and  delivered  the  work  that  was  paid  for  more  than  18  months  ago. 

We  have  recommended  that  strong  disciplinary  action  be  taken  against  the  employee 
involved,  including  possible  termination.  In  his  response  to  the  audit,  the  director  of  the 
department  stated  that  he  will  work  with  the  Controller  to  implement  all  recommendations 
in  this  report.  We  would  further  ask  the  Building  Inspection  Commission  to  follow  up  with 
the  director  on  the  department’s  implementation  of  the  report’s  recommendations, 
including  the  director  taking  disciplinary  action  against  the  employee. 


Respectfully  submitted. 
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INTRODUCTION 


ALLEGATION 

The  Office  of  the  City  Attorney  and  the  Department  of 

Building  Inspection  (department)  of  the  City  and  County  of 
San  Francisco  (City)  asked  the  Controller’s  Audits  Division 
to  investigate  an  allegation  that  the  manager  of  the  Management 
Information  Services  Division  (MIS)  of  the  department  improperly 
prepaid  a city  vendor,  Government  Computer  Sales,  Inc.  (GCSI), 
for  services  that  the  vendor  had  not  yet  provided. 


BACKGROUND 

The  Department  of  Building  Inspection  serves  the  City  and  the 
public  by  safeguarding  life  and  property  in  San  Francisco.  Its 
mission  is  to  oversee  the  effective,  efficient,  fair,  and  safe 
enforcement  of  the  City’s  building,  housing,  plumbing,  electrical, 
and  mechanical  codes  and  of  disability  access  regulations.  To 
increase  the  efficiency  and  productivity  of  its  work,  the  department 
installed  a computer  system  that  uses  Oracle  software  for  tracking 
building  permits.  In  2000,  the  department  started  several  projects 
to  further  enhance  its  permit  tracking  system.  It  began 
implementing  a document  tracking  system  to  further  improve  the 
productivity  and  timeliness  of  its  permit  review.  It  also  initiated 
three  related  projects  for  enhancing  the  permit  tracking  system. 

The  first  project  was  to  merge  two  of  its  pre-existing  relational 
database  systems  to  facilitate  a single  point-of-entry  system  for 
permit  processing.  The  second  project  was  to  install  a bar-coding 
system  to  allow  easier  tracking  of  building  permits.  The  third 
project  consisted  of  an  application  merge  to  restructure  the  85 
applications  used  by  department  staff. 

To  accomplish  this  work,  the  department  contracted  with  GCSI,  an 
approved  City  vendor.  Between  September  2000  and  March  2001, 
GCSI  submitted  three  separate  bids  to  perform  the  three  projects. 
GCSI,  with  the  approval  of  the  department,  subcontracted  the  three 
projects  to  Complete  Systems  Solutions,  Inc.  (Complete  Systems 
Solutions).  As  the  appendix  shows,  Complete  Systems  Solutions 
started  the  database  merge  project  in  October  2000.  GCSI  also 
hired  two  other  subcontractors,  RadixOne  and  IP  EX,  to  perform 
the  quality  assurance  testing  at  the  department.  Under  this 
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arrangement,  the  department  would  pay  GCSI  and  GCSI  would 
then  pay  its  subcontractors  for  working  at  the  department. 

According  to  the  MIS  manager,  during  the  summer  of  2001 , GCSI 
began  exhibiting  difficulties  in  meeting  its  financial  obligations. 

By  late  August  2001,  the  MIS  manager  had  met  with  city  and 
GCSI  representatives  to  discuss  these  problems.  The  director  of 
Semantics  told  us  that  in  September  2001,  Semantics  refused  to 
continue  its  work  on  the  application  merge  project  because  it  had 
received  only  $25,500  out  of  the  $285,500  in  invoices  that  it  had 
billed  to  GCSI.  The  other  two  subcontractors,  RadixOne  and  IPEX, 
had  also  invested  significant  resources  in  conducting  its 
subcontracting  work,  but  GCSI  owes  one  subcontractor  a small 
amount  and  has  not  paid  the  other  subcontractor  at  all. 

Nonetheless,  GCSI  had  already  submitted  three  invoices  to  DBI  for 
completing  the  three  projects  and  DBI  paid  a total  of  $553,956  to 
GCSI  from  January  2001  through  June  2001.  GCSI  still  owes  it’s 
subcontractors  $404,780. 

Because  GCSI  did  not  pay  its  subcontractors,  the  subcontractors 
have  stopped  work  on  the  department’s  projects,  and  Semantics  is 
withholding  needed  programming  codes  that  would  enable  the 
department  to  use  the  applications  for  the  three  projects. 


SCOPE  AND  METHODOLOGY 

The  purpose  of  the  audit  was  to  investigate  whether  the  MIS 
manager  prepaid  GCSI  for  services  not  yet  received  and  to 
determine  whether  the  department  followed  proper  purchasing  and 
payment  procedures.  To  conduct  the  audit,  we  interviewed 
appropriate  management  personnel  from  the  department,  the  City’s 
purchasing  department,  the  Committee  on  Information  Technology 
(COIT),  and  the  subcontractors  that  performed  the  services.  We 
also  reviewed  relevant  documents,  such  as  the  business  folio, 
project  plans,  quotes,  purchase  orders,  and  invoices  relating  to  the 
projects.  Further,  we  examined  the  contract  between  the  City  and 
GCSI. 

We  did  not  review  documents  relating  to  any  other  projects  for 
which  the  department  had  contracted  with  GCSI,  nor  did  we 
review  any  other  projects  conducted  by  other  city  departments 
through  GSCI. 
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AUDIT  RESULTS 


THE  DEPARTMENT’S  MANAGEMENT 
INFORMATION  SERVICES  DIVISION 
IMPROPERLY  PAID  FOR  SERVICES  THAT  THE 
VENDOR  HAD  NOT  COMPLETED 

The  manager  for  the  Management  Information  Services 
Division  (MIS)  at  the  Department  of  Building  Inspection 
(department)  improperly  approved  paying  Government 
Computer  Sales,  Inc.  (GCSI),  for  work  that  GCSI’s  subcontractors 
had  not  yet  completed.  The  department  issued  three  purchase 
orders  to  GCSI  to  conduct  work  on  three  projects  involving 
computer  applications.  For  two  of  the  three  purchase  orders,  the 
manager  approved  paying  GCSI  the  entire  amounts  of  the  purchase 
orders  even  though  the  subcontractors  had  not  completed  a 
substantial  portion  of  their  work.  In  so  doing  the  manager  did  not 
properly  protect  the  department  and  the  City  and  County  of  San 
Francisco  (City)  by  requiring  details  on  deliverables  and  timelines 
from  GCSI  that  the  department  would  follow  in  paying  GCSI  for 
work  completed  on  the  three  purchase  orders.  Moreover,  the 
projects,  for  which  the  City  had  paid  for,  remain  incomplete 
because  GCSI’s  subcontractors  have  received  only  27  percent  of 
the  payments  that  GCSI  owes  them.  The  Appendix  shows  the 
significant  dates  for  the  three  purchase  orders. 


The  manager  of  the 
Management 
Information  Services 
Division  approved 
paying  $138,609  to 
GCSI  even  when  the 
department  did  not 
have  a usable 
database  product. 


The  MIS  Manager  Approved  Paying  Early  and  in 
Full  for  an  Incomplete  Database  Merge 

For  the  database  merge  project,  GCSI  had  subcontracted  with 
Complete  Systems  Solutions,  Inc.  (Complete  Systems  Solutions). 
Within  45  days  after  Complete  Systems  Solutions  had  started  the 
work,  GCSI  submitted  on  November  28,  2000,  an  invoice  for 
$138,609,  the  entire  amount  of  the  project’s  purchase  order.  The 
MIS  manager  approved  paying  the  invoice  on  January  8,  2001,  and 
the  City  issued  a $138,609  check  to  GCSI  on  January  12,  2001. 
However,  even  in  January  2001,  the  department  did  not  have  a 
useable  database,  and  should  not  have  paid  GCSI  the  entire  amount 
of  the  purchase  order.  According  to  copies  of  emails  provided  by 
the  MIS  manager.  Complete  Systems  Solutions  was  still  trying  to 
complete  the  database  merge  project  in  March  2001, 
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approximately  three  months  after  the  MIS  manager  had  approved 
paying  GSCI  for  the  entire  amount  of  the  purchase  order. 

Moreover,  the  MIS  business  analyst  indicated  to  us  that  the  MIS 
manager  found  it  necessary  to  end  the  contract  with  Complete 
Systems  Solutions  because  it  could  not  produce  results  for  the 
database  merge  even  though  the  subcontractor  had  spent  nine 
months  on  the  project.  GCSI  then  hired  Semantics  Consulting 
(Semantics)  to  replace  Complete  Systems  Solutions  in  July  2001. 
According  to  the  director  of  Semantics,  his  company  was  able  to 
complete  90  percent  of  the  database  merge  project  by  September 
2001,  less  than  six  weeks  after  it  had  been  asked  to  take  over  the 
database  merge  project.  According  to  the  director,  Semantics  did 
not  use  any  of  Complete  Systems  Solutions’  work. 


The  MIS  Manager  Approved  Full  Payment  for  the 
Application  Merge  Long  Before  the  Project’s 
Completion 


The  MIS  manager 
approved  full  payment 
of  $300,000  to  GCSI 
even  though  less  than 
35  percent  of  the  work 
had  been  performed. 


Similarly,  for  the  application  merge  project,  the  MIS  manager 
approved  paying  GCSI  the  entire  amount  of  the  purchase  order 
before  GCSI’s  subcontractor  for  the  project  had  completed  a 
substantial  portion  of  the  work.  On  March  13,  2001,  GCSI 
submitted  the  project  quote  of  $300,000,  and  GCSI  started  the 
project  on  April  1,  2001.  On  May  31,  2001  GCSI  submitted  an 
invoice  requesting  the  full  payment  of  $300,000.  On  June  1 8, 

2001 , the  MIS  manager  approved  paying  the  full  amount  of  the 
invoice,  and  the  City  issued  a $300,000  check  to  GCSI  on  June  20, 
2001. 


According  to  the  director  of  Semantics,  the  subcontractor  that 
actually  performed  the  application  merge,  Semantics  had 
completed  only  35  percent  of  the  work  by  July  2001.  This  director 
stated  that  his  company  had  to  suspend  work  because  it  needed  the 
results  from  the  database  merge  project  to  complete  the  work  on 
the  application  merge.  Because  Complete  Systems  Solutions  had 
not  finished  the  database  merge  project,  GCSI  hired  Semantics  to 
complete  the  database  merge  project  as  well.  Semantics  worked  on 
both  the  database  merge  and  application  merge  through  August 
2001,  until  it  had  substantially  completed  the  database  merge.  The 
subcontractor  then  focused  solely  on  the  application  merge. 


Semantics’  director  told  us  that  at  the  end  of  September  2001, 
Semantics  decided  to  stop  all  work  because  GCSI  had  not  paid  the 
subcontractor  for  its  services.  At  that  point,  Semantics  had 
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Because  GCSI  has  not 
fully  paid  its 
subcontractors,  one  of 
them  is  withholding 
needed  programming 
codes  to  enable  the 
department  to  use  the 
applications  that  it  paid 
GCSI  to  provide. 


completed  80  percent  of  the  application  merge.  According  to  the 
director,  until  it  receives  payment,  Semantics  is  withholding  the 
programming  codes  to  enable  the  department  to  use  the  various 
applications  from  the  three  projects. 

The  MIS  manager  claimed  that  GCSI  accompanied  its  invoice  with 
satisfactory  explanation  that  the  application  merge  project  was  80 
percent  complete,  but  the  MIS  manager  could  not  provide  us  with 
documentation  to  support  this  claim. 


GCSI  Received  Payment  for  an 
Unfinished  Bar-Coding  Project 

The  MIS  manager’s  approval  of  the  GCSI  invoice  for  the  Bar- 
coding project  appears  more  justified  than  the  other  projects. 
However,  the  MIS  manager  approved  paying  GCSI  the  entire 
amount  of  the  invoice,  even  though  approximately  20%  of  the 
work  remained  incomplete  on  this  bar-coding  project. 

In  March  2001,  GCSI’s  subcontractor,  Complete  Systems  ! 
Solutions,  began  the  bar-coding  project,  which  was  still  incomplete 
at  the  time  of  our  review.  According  to  emails  from  Complete 
Systems  Solutions  to  the  MIS  manager,  the  installation  of  the  bar- 
coding phase  would  occur  on  April  16,  2001.  Nevertheless,  on 
April  10,  2001,  six  days  before  the  planned  installation,  GCSI 
submitted  a $1 14,714  invoice  to  the  department.  According  to  the 
MIS  manager,  in  April  2001,  the  bar-coding  project  was 
approximately  80  percent  complete,  and  on  July  20,  2001,  the  MIS 
manager  approved  paying  GCSI  the  entire  amount  listed  on  the 
invoice.  Although  the  amount  on  the  project’s  purchase  order 
totaled  $124,177,  GCSI  billed  only  $1 14,714  because  the  initial 
amount  included  tax.  Furthermore,  according  to  the  MIS  manager, 
the  20  percent  of  the  bar-coding  project  that  remains  incomplete 
involves  the  project’s  implementation,  which  requires  completion 
of  the  application  merge  project. 
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GCSI  Has  Not  Yet  Fully  Paid  Its  Subcontractors 
for  Their  Work  on  Department  Projects 


Although  GCSI 
received  more  than 
$550,000  from  the 
department,  GCSI  has 
paid  only  27  percent  of 
its  subcontractors’ 
invoices. 


Although  the  department  has  paid  GCSI  more  than  $550,000  for 
the  three  projects  that  we  reviewed,  GCSI  has  paid  only  27  percent 
of  the  subcontractors’  total  invoices.  Representatives  of  EPEX, 
RadixOne,  and  Semantics,  the  three  subcontractors  that  GCSI 
hired,  provided  us  with  copies  of  the  invoices  that  they  submitted 
to  GCSI  for  work  performed  on  the  database  merge,  bar-coding, 
and  application  merge  projects.  According  to  IPEX,  GCSI  has  not 
paid  any  of  the  $1 1 8,320  that  GCSI  owes  this  subcontractor. 
According  to  RadixOne,  GCSI  still  owes  it  $31,660.  Finally, 
Semantics  representatives  stated  that  although  Semantics  submitted 
invoices  to  GCSI  totaling  $280,300,  GCSI  still  owes  Semantics 
$254,800.  A total  of  $404,780  that  has  been  paid  to  GCSI  appears 
to  still  be  owed  to  its  subcontractors. 


The  MIS  Manager  Did  Not  Protect 

the  Interests  of  the  City  by  Listing  on  Purchase 

Orders  the  Details  of  Project  Deliverables 

GCSI  and  the  MIS  manager  did  not  provide  sufficient  details  in  the 
project  quotes  or  in  the  subsequent  purchase  orders  for  the  three 
projects,  which  had  cost  estimates  that  totaled  more  than  $500,000. 
The  executive  director  of  the  City’s  Committee  on  Information 
Technology  (COIT)  indicated  to  us  that  projects  that  have  the  size 
and  scope  of  the  department’s  projects  should  have  contracts  that 
detail  payment  plans  based  on  the  vendors’  documentation  of 
completed  work,  or  deliverables.  However,  the  three  purchase 
orders  issued  to  GCSI  lack  such  plans.  Only  the  purchase  order  for 
the  database  merge  specifies  the  steps  involved  in  that  project,  and 
even  that  purchase  order  does  not  list  the  applicable  services  or 
costs  associated  with  each  step  and  amounts  that  the  department 
should  pay  GCSI  when  each  step  is  completed. 

For  the  bar-coding  project,  the  purchase  order  describes  the  project 
only  briefly,  and  it  does  not  supply  details  about  the  project’s 
phases  or  deliverables.  The  purchase  order  for  the  application 
merge  project,  which  was  to  cost  $300,000,  includes  only  the 
following  description:  “Merge  the  various  [department]  database 
applications  so  that  they  connect  to  a single  database.” 

Furthermore,  the  invoices  submitted  by  GCSI  do  not  list  any 
details  about  work  accomplished.  On  its  invoice  for  the  database 
merge,  GCSI  used  only  the  phrase  “custom  installation”  to  support 
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its  request  for  payment.  On  the  invoice  for  the  bar-coding  project, 
GCSI  wrote  “Add  feature  to  dev.  2000-barcode  info.”  Finally,  on 
the  invoice  applying  to  the  application  merge,  GCSI  stated  simply 
“GCSI  database  programming.”  For  the  invoices  corresponding  to 
all  three  projects,  the  MIS  manager  approved  paying  the  full 
amounts  requested  by  GCSI. 


THE  DEPARTMENT  NEEDS  TO  IMPROVE 
PROCEDURES  FOR  MONITORING 
PROJECTS  INVOLVING  MANAGEMENT 
INFORMATION  SYSTEMS 


The  department’s 
Finance  and 
Administration  Division 
lacked  the  necessary 
information  to 
determine  whether 
GCSI’s  invoices  should 
have  been  paid. 


Although  the  department  followed  the  correct  departmental 
procedures  for  approving  purchases,  its  Finance  and 
Administration  Division,  which  processes  payments,  had  to  rely  on 
the  MIS  manager’s  review  in  approving  the  invoices  for  payment. 
The  invoices  submitted  by  GCSI  had  little  information  about  the 
services  that  it  had  provided.  The  department  had  to  rely  on  the 
assertions  by  the  manager  for  its  MIS  that  the  vendor  had 
completed  the  work  and  should  receive  payment.  Because  the  MIS 
manager  approved  the  payments  initially,  the  Finance  and 
Administration  Division  also  approved  the  payments  without 
knowing  that  it  was  for  incomplete  work. 


Before  paying  final  invoices  submitted  by  GCSI  for  the  three 
projects,  the  department  should  have  required  the  MIS  manager  to 
provide  sufficient  documentation  that  the  contracted  services  were 
complete  and  delivered  to  the  department.  According  to  the 
manager  of  the  Finance  and  Administration  Division,  she  reviews 
only  the  availability  of  budgeted  funds  for  payment  of  an  invoice 
and  that  she  is  not  an  expert  in  information  technology.  This 
manager  stated  that  she  must  rely  on  the  MIS  manager  and  COIT 
to  work  out  the  details  of  the  services  that  the  vendor  is  to  provide 
and  to  verify  that  the  vendor  has  provided  the  contracted  services. 


Further,  for  the  three  projects  undertaken  by  GCSI,  the  department 
did  not  provide  adequate  management  oversight  to  ensure 
accountability  for  project  costs  and  timeliness.  According  to  the 
department’s  assistant  director,  the  department  assigned  a project 
manager  of  the  permit  tracking  system  to  oversee  the  GCSI 
projects.  This  manager  provided  updates  to  the  department’s  four 
top  executives.  Although  the  department’s  assistant  director 
oversees  the  MIS  area,  she  stated  that  her  role  in  technology 
projects  is  limited  to  financial  review  and  to  overall  departmental 
coordination.  She  believed  that  her  role  was  not  centered  around 
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the  day-to-day  progress  of  these  projects  or  working  directly  with 
vendors,  since  there  was  a project  manager  assigned  along  with  the 
MIS  manager  who  had  the  technical  skills  to  control  and  monitor 
the  progress  of  all  the  technology  projects.  She  stated  that  she  did 
receive  periodic  Gantt  charts  from  the  project  manager  and  MIS 
manager  for  the  three  GCSI  projects  but  that  she  believed  they 
were  monitoring  the  project  costs  and  timeliness.  Therefore,  she 
did  not  question  the  fact  that  the  projects  took  the  vendor  more 
than  twice  the  length  of  time  as  originally  indicated  on  the  project 
plans  and  are  still  incomplete.  She  believed,  similar  to  other  city 
departments,  the  MIS  manager  has  the  responsibility  of  overseeing 
MIS  projects  and  that  in  her  department,  she  relied  on  the  oversight 
not  only  by  the  MIS  manager  but  also  by  the  project  manager. 


THE  COMMITTEE  ON  INFORMATION 
TECHNOLOGY  DID  NOT  APPROVE  THE 
SUBCONTRACTORS  ASSIGNED  TO  THE 
PROJECTS 

According  to  the  contract  between  the  City  and  GCSI,  the  City’s 
Committee  on  Information  Technology  (COIT)  must  approve  in 
writing  any  subcontractors  hired  by  GCSI.  COIT’s  director 
indicated  to  us  that  the  department’s  subcontractors  for  this  project 
did  not  receive  this  approval  and  that  she  was  not  aware  of  the 
subcontractors.  Although  GCSI  was  responsible  to  notify  COIT 
about  the  subcontractors,  the  department  could  also  have  notified 
COIT. 


RECOMMENDATIONS 


To  ensure  that  the  Department  of  Building  Inspection  avoids 
payments  for  services  that  its  contractors  have  not  delivered,  the 
department  should  take  the  following  steps: 

• Take  stem  disciplinary  action,  including  possible  termination, 
as  determined  by  the  department  working  with  the  Department 
of  Human  Resources  and  the  Office  of  the  City  Attorney, 
against  the  manager  of  the  Management  Information  Services 
Division  for  improperly  approving  payments  to  GCSI  for  work 
that  had  not  yet  been  performed  and  not  properly  protecting  the 
depanment  and  the  City  by  requiring  sufficient  details  on 
purchase  orders  and  invoices. 

• Improve  the  reporting  and  management  of  information  services 
projects  by  describing  in  detail  on  vendors’  purchase  orders 
and  contracts  the  specific  services  that  vendors  are  to  provide. 
If  it  intends  to  make  progress  payments  before  the  completion 
of  a contract,  the  department  should  specify  a payment  plan 
based  on  the  vendor’s  delivery  of  specific  goods  or  services. 

• Require  its  staff  to  provide  the  Finance  and  Administration 
Division  with  sufficient  documentation  to  support  approval  for 
payments. 

• Assign  a knowledgeable  executive  to  monitor  all  projects 
undertaken  by  the  Management  Information  Services  Division. 
The  department  should  clearly  delineate  the  responsibilities  for 
monitoring  projects,  including  accountability  for  project  costs 
and  timeliness. 


We  conducted  this  review  according  to  generally  accepted 
government  auditing  standards.  We  limited  our  review  to  those 
areas  specified  in  the  audit  scope  section  of  this  report. 


Staff:  Elisa  Sullivan,  Audit  Manager 
Helen  Vo 
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APPENDIX 


Time  Lines  for  Three  Projects  Overseen  by 
the  Management  Information  Services  Division  of  DBI 


DATABASE  MERGE 


BAR-CODING 


APPLICATION  MERGE 


Abbreviations: 

COIT  = Committee  on  Information  Technology 
CSS  = Complete  Systems  Solutions,  Inc.  (subcontractor) 
GCSI  = Government  Computer  Sales,  Inc.  (contractor) 
Semantics  = Semantics  Consulting  (subcontractor) 
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DEPARTMENT  OF  BUILDING  INSPECTION 
RESPONSE  TO  THE  AUDIT: 


City  and  County  of  San  Francisco 
Department  of  Building  Inspection 


Willie  Lewis  Brown  Jr.,  Mayor 
Frank  Y.  Chiu,  C.B.O.,  Director 


January  10,  2003 


Mr.  Edward  Harrington 
Controller 

Office  of  the  Controller 
1 Dr.  Carlton  B.  Goodlett  Place,  Room  316 
San  Francisco  CA  94103 

Dear  Mr.  Harrington: 

In  an  effort  to  improve  the  efficiency  of  permit  issuance  and  ensure  effective  automated  quality 
control  measures,  the  Department  of  Building  Inspection  sought  to  make  significant  upgrades  in 
our  information  systems;  particularly  to  our  Permit  Tracking  System,  which  contains  all  our 
permit  and  inspection  records. 

In  the  fall  of  2001,  the  Department’s  MIS  Manager  notified  us  that  the  main  city  store  vendor, 
Government  Computer  Sales,  Inc.  (GCSI),  who  was  working  on  our  Permit  Tracking  System 
development  had  not  paid  its  subcontractors  and  was  planning  on  declaring  bankruptcy.  For 
these  reasons,  we  requested  that  your  office  conduct  an  in-depth  review  of  all  the  related 
transactions  and  also  forwarded  our  concerns  to  the  City  Attorney's  Office. 

Since  this  matter  was  brought  to  our  attention,  we’ve  changed  the  approval  process  for  all  MIS 
related  payments.  All  payments  are  now  being  reviewed  and  approved  by  the  Assistant  Director 
and  Director.  The  Department  and  the  Building  inspection  Commission  has  also  created  a MIS 
Review  Committee  to  oversee  all  information  systems  projects,  contracts,  and  payments.  This 
committee  is  comprised  of  two  Commission  members,  a DBI  Executive  Manager,  and  a project 
manager  in  addition  to  the  MIS  manager.  Because  knowledge  of  information  systems  is  so 
specialized  and  technical,  we  will  be  seeking  to  utilize  a staff  member  from  the  Department  of 
Telecommunications  and  Information  Services  (DT1S)  to  substantially  participate  in  the 
oversight  of  all  DBI’s  information  systems.  We  are  also  looking  at  requiring  all  future  contracts 
to  be  posted  with  performance  bonds. 

Thank  you  for  your  report,  and  we  look  forward  to  working  with  your  office  to  implement  all  the 
recommendations  cited  in  your  report. 


Very  truly  yours, 


Frank  Y.  Chiu,' CTeTo. 
Director 


FYCicj 


misauditresponse.ltr 


1660  Mission  Street,  Sixtb  Floor  - San  Francisco,  CA  94103 
Office  (415)  558-6131  - FAX  (41 5)  558-6225 

www.ci.sf.ca.us/dbi  - frank„chiu@ci.sf.ca.us 
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cc:  Mayor 

Board  of  Supervisors 
Civil  Grand  Jury 
Budget  Analyst 
Public  Library 
KPMG  LLP 
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